logo

REST in Peace

Posted by goloroden |2 hours ago |2 comments

FrankWilhoit an hour ago[1 more]

Just one pinprick: "discovering capabilities at runtime" is a security antipattern. There can never be wildcard roles. Every interaction must specify one (possibly composed) role.